Privacy Policy GF63 — Personal Data Protection Malaysian Members

GF63 uses collected personal information solely for purposes directly related to delivering our platform services. The following are the primary purposes for which GF63 uses your data:

• GF63 Account Management: Your information is used to create, verify, and manage your GF63 account — including processing your registration, verifying your identity for KYC requirements, and enabling you to log in securely to the GF63 platform from your smartphone or computer.
• Financial Transaction Processing: Your payment and financial information is used to process deposits and withdrawals in MYR via your chosen Malaysian payment method — whether Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or FPX through local Malaysian banks. Every GF63 transaction is processed through fully encrypted channels.
• Security & Fraud Prevention: GF63 uses technical data such as IP addresses and device information to detect and prevent suspicious activity, unauthorised access attempts, and any form of fraud or manipulation on the platform. This is to protect the interests of all GF63 members, including yourself.
• Customer Support: When you contact the GF63 support team via email at [email protected], we may use your account information to verify your identity and handle your request or complaint more efficiently. All GF63 support communications are retained for record-keeping and service quality improvement purposes.
• Legal & Regulatory Compliance: GF63 may be required to disclose certain personal information to the relevant authorities in Malaysia when mandated by law — including for compliance with the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001, as well as directives from competent financial or regulatory authorities.
• GF63 Service Communications & Promotions: With your consent, GF63 may send you information about the latest bonus offers, new game promotions, and important platform updates via email or SMS to the Malaysian phone number you registered. You may opt out of marketing communications at any time through your GF63 account settings or by contacting [email protected].
• GF63 Platform Improvements: Usage and technical data collected is used in aggregate and anonymised form to help GF63 understand how members use the platform, which games are most popular among Malaysian players, and where improvements can be made to deliver a better experience for all members.

GF63 will not use your personal data for any purpose not stated in this Privacy Policy without first obtaining your additional consent. This is GF63's commitment to transparency and integrity in managing the personal data of Malaysian members.

GF63 understands that your trust in us depends in large part on how we handle the sharing of your personal information. GF63's core principle is straightforward: we do not sell, rent, or trade your personal information to third parties for their own commercial or marketing purposes. Full stop.

However, in the course of operating the GF63 platform legitimately, there are limited situations where GF63 may need to share your personal information with certain parties:

• Payment Service Providers: When you make a deposit or withdrawal on GF63, the required transaction details are shared with authorised Malaysian payment service providers — such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, or local banks processing FPX transactions. This sharing is kept to a minimum and is solely for the purpose of processing your financial transactions in MYR.
• Game Software Providers: GF63 works with licensed game providers to deliver our collection of slots and casino games. Minimum technical data required to process bets and determine game outcomes may be shared with these providers, subject to strict confidentiality agreements that ensure your data remains fully protected.
• Legal Compliance: GF63 will disclose personal information to Malaysian authorities when lawfully required to do so by legislation, court order, or regulatory directive. GF63 has no discretion to refuse such requests, but we will notify you of any such disclosure unless specifically prohibited by a court order or applicable law.
• Fraud Investigation: In the very limited circumstances where there is an urgent need to investigate or prevent fraud, money laundering, or a serious security threat, GF63 may share the necessary information with law enforcement agencies or relevant authorities in Malaysia.

GF63 employs a comprehensive combination of technical and procedural security measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. The following are the layers of protection we apply at GF63:

• 256-bit SSL Encryption: All data transmitted between your device and GF63's servers is encrypted using SSL (Secure Sockets Layer) technology with a 256-bit key — the same security standard used by Malaysia's major banking institutions such as Maybank and CIMB. This means that even if someone were to intercept data in transit, they would be unable to read or use it.
• Secure Data Storage: All personal information stored in GF63's systems is encrypted at rest using current industry-standard encryption. GF63's servers are housed in data centres secured with strict physical access controls, 24/7 monitoring, and multi-layered protection against cyber threats.
• Two-Factor Authentication (2FA): GF63 offers two-factor authentication for your account — an added layer of security that requires OTP code verification sent to your Malaysian phone number whenever a new login attempt or significant financial transaction is made. GF63 strongly encourages all members to enable this feature.
• Continuous Account Activity Monitoring: GF63's systems continuously monitor all account activity to identify unusual or suspicious patterns — including login attempts from unrecognised locations, unexpected account setting changes, or transaction patterns that deviate from the norm. Any suspicious activity will instantly trigger a security alert to both you and the GF63 team simultaneously.
• Staff Training: All GF63 staff with access to members' personal data undergo comprehensive data protection training and are bound by strict confidentiality agreements. Access to members' personal data is granted on a need-to-know basis and is subject to regular audits.
• Regular Security Testing: GF63 conducts regular penetration testing and security audits carried out by certified independent parties to ensure our systems remain resilient against ever-evolving cyber threats. Any vulnerabilities identified are promptly addressed by the GF63 technology team.

While GF63 makes every effort to protect your data, no system can be guaranteed 100% secure against all threats. GF63 therefore encourages you to play your part in keeping your account safe — use a strong password, never share your GF63 login credentials with anyone, and report any suspicious activity to [email protected] immediately.

As a GF63 member and as a Malaysian citizen or resident, you have specific rights regarding the personal data we hold about you. GF63 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights above, please contact the GF63 privacy team by email at [email protected] with the subject line "Privacy Rights Request", stating the right you wish to exercise and your GF63 account details. GF63 is committed to processing and responding to all requests within 30 working days, in line with the requirements set out under Malaysian data protection law.

GF63 uses cookies — small text files stored on your device — to enhance your experience on our platform. Cookies allow GF63 to remember your preferences, maintain your login session, and ensure the platform functions correctly. The following are the types of cookies used by GF63:

You can control and manage cookies through your browser settings. Please note, however, that disabling essential cookies may affect core functions of the GF63 platform — including the ability to log in and play games. Analytics and functional cookies can be turned off without affecting the core capabilities of your GF63 account.

GF63 retains your personal information only for as long as it is needed for the purposes stated in this Privacy Policy, or as required by applicable laws and regulatory obligations in Malaysia. The following is a general guide to data retention periods at GF63:

• Active Account Data: For as long as your GF63 account remains active, we retain all relevant personal data and transaction records so you can access your account history and so we can meet applicable audit requirements.
• Financial Transaction Records: In accordance with Malaysian financial regulatory requirements, GF63 is obligated to retain transaction records — including all deposits and withdrawals in Malaysian Ringgit (MYR) — for a minimum period of seven (7) years from the date of each transaction. This is a compliance requirement that GF63 cannot waive.
• Closed Account Data: When you close your GF63 account, we will delete or anonymise your personal data within 90 days, except for records that must be retained for legal compliance as outlined above.
• Identity Verification Data (KYC): Identity verification documents such as copies of Malaysian identity cards collected for KYC purposes are retained for five (5) years after the termination of the service relationship, in accordance with the Anti-Money Laundering Act requirements.

Once the retention period expires, GF63 will delete your personal data in a secure and irreversible manner, or anonymise it so that it can no longer be linked to you personally. This deletion process is carried out automatically by GF63's systems according to a pre-established schedule.

GF63 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our privacy practices, new legal requirements, or improvements to how the GF63 platform operates. When material changes are made to GF63's Privacy Policy, we will:

• Updating the "Last Updated" date at the top of this document;
• Notifying affected GF63 members via email to their registered address or through in-platform notifications;
• Displaying a summary of the key changes made so you can quickly understand what has changed without having to re-read the entire document.

Your continued use of the GF63 platform after an updated Privacy Policy is published will be considered your acceptance of those changes. If you do not agree with any of the changes, you have the right to close your GF63 account and request deletion of your data by contacting [email protected].